Last Updated: 29 June 2023
California, Colorado, Connecticut, Utah, and Virginia have enacted consumer privacy laws that grant their residents certain rights and require specific disclosures ("State Laws"). This Supplemental U.S. State Privacy Notice ("Notice") addresses these state-specific requirements and also serves as our California notice at collection.
- all Spotify streaming services as a user; and
- other Spotify services which include a link to this Notice. These include Spotify websites, Customer Service and the Community Site
From now on, we'll collectively call these the "Spotify Service".
We may update this Notice from time to time. If we make changes, we will notify you by revising the Last Updated date above. If we make material changes, we will provide you with additional notice (such as by adding a statement to our websites and mobile apps or sending you a notification). We encourage you to review this Notice regularly to stay informed about our information practices and the choices available to you.
- Collection, Use, and Disclosure of Personal Information
- Other Details About Our Information Practices
- Additional Privacy Rights and Opt-Out Instructions
- California Request Metrics
- Contact Us
|Categories of Recipients||Categories of Personal Information||Uses of Personal Information (i.e., our reason for disclosing)|
|Hosting providers, and other technical and operational service providers||
||So they can help us provide the Spotify Service including those we hire to:
|Customer Service Providers||
||So they can help us to:
||So they can process your payments, and for anti-fraud purposes.|
|Analytics and measurement providers||
||So they can help us analyze trends and statistics, learn more about your preferences, and improve the Spotify experience, including to:
|Ticketing and event partners||
||For every event for which we sell tickets, we will need to disclose your name, email or other order details to our event partners such as ticketing agents or the venue box office where the event is taking place so that you can check-in as a verifiable guest who purchased tickets through Spotify’s ticketing platform.|
|Other Spotify group companies, including companies that Spotify acquires||
||To carry out our daily business operations and so we can maintain, improve and provide the Spotify Service and acquired companies’ services to you.
|Law enforcement and other authorities, or other parties to litigation||
||When we believe in good faith it’s necessary for us to do so, for example:
Personal Information that we "Share" (as defined under California law) or Use for "Targeted Advertising"
We disclose the following categories of personal information to third parties for the purpose of engaging in targeted advertising and other marketing activities, including to expand the reach and effectiveness of our own marketing campaigns and for the third parties' own marketing purposes. These disclosures may be considered "sharing" or use of personal information for "targeted advertising" under certain state laws and you have the right to opt out of having your personal information used or disclosed for these purposes. See the "Opting Out of Sharing and Targeted Advertising" section below for details about opting out.
|Categories of Personal Information “Shared” or used for Targeted Advertising||Categories of Recipients|
|Identifiers (such as your name, profile name, email address, device identifier or IP address)||Advertising and marketing partners
|Commercial information (such as your purchase history)||Advertising and marketing partners
|Internet and electronic network activity information (such as information from cookies and your interactions with Spotify)||Advertising and marketing partners
|Advertising and marketing partners|
|Geolocation data (i.e.,your non-precise location as derived from your IP address). We do not collect or disclose precise geolocation data.||Advertising and marketing partners|
- We do not knowingly "share" personal information about consumers under the age of 16 for cross-context behavioral advertising without their consent.
- We do not collect information that is considered "sensitive" under state privacy laws.
- maintaining the performance of the Spotify Service
- making data-driven business decisions about new features and offerings
- complying with our legal obligations
- resolving disputes
Nondiscrimination. We will not discriminate against you for exercising your privacy rights.
Authorized Agents. If you reside in California, Colorado, or Connecticut, you may designate an authorized agent to submit a privacy rights request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may be required to contact the consumer to verify his or her identity or confirm the authorized agent has permission to submit the request. Authorized agents can submit rights requests by following the instructions provided above.
Appeals. If your request is denied you may have the right to appeal the denial in accordance with the instructions provided to you when the denial was made.
The following chart contains statistics about global verifiable requests we received from consumers between 1 January and 31 December 2022:
|Type of request||Received||Complied||Denied||Average response rate|
|Right to Know / Access||764,451||764,451||0||12 days|
|Request to Delete||4,149,899||4,149,899||0||15.5 days|
For any questions or concerns about this Notice, contact our Data Protection Officer any one of these ways:
- email firstname.lastname@example.org
- write to us at: Spotify USA Inc., 150 Greenwich Street, Floor 62, New York, NY 10007, USA
Spotify USA Inc. is the data controller of personal data processed under this Notice.
© Spotify USA Inc.